# Highlights


- Various critical fixes for the interposer plugin infrastructure
- GSS-Proxy is now fully stateless through the use of new import/export credential functions avalable in MIT 1.11
- Enable new kernel interface to enable GSS-Proxy support in the rpcgss kernel module (still not mainline)
- Add environment variables to influence interposer plugin behavior.
- Improved tests
- Packaging fixes, including systemd unit files fixes


# Detailed Changeog
Andreas Schneider (1):

-      Packaging fixes


Günther Deschner (16):

-      build: check for gss_import_cred and gss_export_cred.
-      Change interposer usage, clients need to set GSS_USE_PROXY=1|YES.
-      Add example GSS-API mechanism plugins config file.
-      interposer-plugin: Fix MIT 1.11 gssi_import_sec_context_by_mech symbol name.
-      mechglue: fix gssi_set_cred_option() arguments.
-      mechglue: initialize gpp cred_handle in gssi_acquire_cred_with_password().
-      Add debug statement when gp_rpc_execute is called.
-      interpostest: improve debug output when gss_context_time() fails.
-      mechglue: add trace debugging
-      Fix gssi_import_sec_context_by_mech()
-      Fix gssi_context_time for remote calls.
-      Add various fixes to gssproxy.spec.
-      Add systemd packaging to gssproxy spec file.
-      Fix systemd config file for gssproxy.
-      Make it easier to test gssproxy behavior settings.
-      Test all possible proxy mode combinations.


Simo Sorce (18):

-      Use new gss_import/export_cred functions
-      Move master version to 0.0.99
-      Fix includes
-      Add custom implementation of xdr_uint64_t
-      Use gssrpc instead of system rpc
-      Add support to get peer's SeLinux context
-      Remove gssproxy.service
-      Enable kernel support.
-      Make socket path a configure option
-      Write pid file at startup.
-      Create helper function to wrap token
-      Use token wrapper in gpp_remote_lo_local_ctx
-      Fix write_pid debug message
-      Improve ccache formatting.
-      Add helper function to check for krb5 oid
-      Add extension to set allowable enctypes
-      Add client side support to set allowed enctypes
-      Set version to 0.1


